Security By Obscurity = Ignorance Is Strength

[David Farber <dave () farber net>]

Begin forwarded message:

From: Seth Finkelstein <sethf () sethf com>
Date: September 3, 2008 1:13:43 PM EDT
To: David Farber <dave () farber net>, ip <ip () v2 listbox com>
Subject: Security By Obscurity = Ignorance Is Strength

[For IP, if worthy]

IP'ers might enjoy my most recent column in the _Guardian_,
which argues against attempts to issue gag orders prohibiting
disclosure of security flaws:

"Orwell was right: security by obscurity = ignorance is strength"
http://www.guardian.co.uk/technology/2008/aug/28/security.law

  As specialised computer systems become more and more integrated
  into the utilitarian functioning of society, we will repeatedly
  face issues of their potential for subversion, corruption, and
  failure. While open disclosure of security weaknesses may seem
  troublesome, the alternative is to follow an Orwellian concept of
  "ignorance is strength".

I'm hoping to popularize my coinage of describing such gag orders as
"Ignorance Is Strength" (a deliberate pun on the idea of cryptographic
strength).

--
Seth Finkelstein  Consulting Programmer  http://sethf.com
Infothought blog - http://sethf.com/infothought/blog/
Interview: http://sethf.com/essays/major/greplaw-interview.php




-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
RSS Feed: https://www.listbox.com/member/archive/rss/247/
Powered by Listbox: http://www.listbox.com